Privacy Policy

1. Overview

Aivoryx Client Portal is a private, access-controlled document management platform operated by Aivoryx. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

• Account information — username, email address, and hashed password on registration.
• Uploaded documents — files you upload, stored securely and only accessible to authorised users.
• Download logs — IP address and timestamp recorded each time a document is accessed, for audit purposes.
• Session data — a temporary session cookie to keep you signed in.

3. How We Use Your Data

• To authenticate you and provide access to the platform.
• To store and serve your uploaded documents securely.
• To maintain download audit logs for compliance and security.
• We do not sell, share, or use your data for advertising.

4. Data Retention

Documents are retained until deleted by the uploader or an administrator. Download logs are retained for internal audit purposes. Account data is retained while your account is active.

5. Security

All passwords are stored using bcrypt hashing. Documents are stored outside the public web root and served only through authenticated requests. All pages are served over HTTPS in production.

6. Your Rights

You may request deletion of your account and associated data at any time by contacting admin@aivoryx.com.